Director, Information Security Engineering and Operations

Callaway Golf•Carlsbad, NM

1d•$166,200 - $249,600

About The Position

The Director, Information Security Engineering and Operations leads security engineering, architecture, and operations globally. The role manages a global team of security engineers and analysts and develops cybersecurity strategy in coordination with the Sr. Director of Global Information Security and Sr. VP of Global IT. It provides coaching, direction, and leadership support to help employees deliver results aligned with cybersecurity, IT, and business strategies. The position oversees assessments of the security program and IT architecture, recommends improvements, and designs security solutions, policies, and playbooks aligned with enterprise frameworks and business strategy. It also helps design secure infrastructure to isolate sensitive data and participates in architectural reviews and threat modeling across IT teams. The Director oversees security risk assessments and testing for new technologies and IT projects, serves on the Incident Response Team for major and high-risk incidents, and communicates risks and response recommendations to relevant leaders and teams. The role also works with law enforcement and internal partners, documents security requirements and controls, contributes security input to procurement documents, and supports executive and Board of Directors presentations.

Responsibilities

Manage and oversee a global team of security engineers and analysts delivering projects that execute the Company’s cybersecurity strategy.
Develop cybersecurity strategy in coordination with the Sr. Director of Global Information Security and Sr. VP of Global IT.
Provide coaching, direction, and leadership support to employees to achieve department and company results aligned with cybersecurity, IT, and business strategies.
Oversee assessments of the security program and IT architecture to identify gaps and recommend actionable, realistic improvements.
Design security solutions aligned with enterprise security architecture frameworks and standards, as well as business and security strategy.
Design information security policies and playbooks aligned with enterprise frameworks and the cybersecurity strategy.
Help design a secure infrastructure layer, in coordination with Global IT Infrastructure, that isolates sensitive data from general access.
Participate in architectural reviews and threat modeling of systems and applications across IT teams.
Oversee and perform security risk assessments and testing for new technologies and IT projects.
Serve as an integral member of the Incident Response Team for major, high-risk cybersecurity incidents and communicate risks and response recommendations to Information Security and IT leadership, impacted IT teams, and the Law department.
Work with external law enforcement, physical security, Human Resources, Legal, and Finance to provide technical expertise regarding information security events and incidents.
Document security requirements and controls, define how new technology affects the current security posture, and provide input on security requirements for RFPs, SOWs, and other procurement documents.
Support the Sr. Director of Global Information Security in developing periodic Board of Directors and Executive Management presentations.